Randomly chosen to update your AOL information? Beware phishing attack

Filed Under: Phishing, Spam

AOL logoA few of you may have noticed that the last digit of the year changed recently, which means it's time to forget about the bad old days of 2010, make New Year's resolutions, and cross fingers for a better future.

Some of you may already have fallen by the wayside in your pledge to no longer eat chocolate, or give up cigarettes, but here's one thing I urge you to show greater will-power over: stop believing everything you read in email.

Scammers, malware authors and phishers continue to prey on the unwary by writing semi-believable things in a friendly font. Although many skeptical computer owners may consign such emails immediately to the garbage bin, there are always a few vulnerable folks who click before they think.

Take this current phishing campaign aimed at AOL users, for instance.

AOL phishing email

It reads, in part, as follows:

Our records indicate that your account hasn't been updated as a part of our regular account maintenance. Our new SSL servers check each account for activity and your information has been randomly chosen for verification. AOL Member Services strives to serve their customers with better and secure banking service.

Notification: Failure to update your account information may result in account limitation at shopping on our portal.

If you make the mistake of clicking on the link you are taken to a website that isn't AOL at all, but asks for all kinds of personal information: your name, address, credit card details, your AOL username and password, date of birth and even social security number!

AOL phishing website

Many people still believe that phishing only targets your online bank account - it's a big mistake to think like that. Cybercriminals are also interested in breaking into your email and social networking accounts too.

Get smart in 2011, and learn to be more suspicious of emails that may be asking you to hand over too much personal information.

, ,

You might like

4 Responses to Randomly chosen to update your AOL information? Beware phishing attack

  1. Anon · 1337 days ago

    I love how it says "Billing update on file must be peformedz" in the subject.

  2. I also received one claiming to be from Bank of America and that my billing details needs to be updated. I don't have a bank of america account and when i clicked on the link, my AV immediately blocked a phishing malware. Below is the email.

    Dear Bank Of America® Member

    We were unable to process your most recent payment. Please verify that your billing information is correct to avoid interruption of your Services.

    To ensure that your account is not interrupted, please update your billing information by clicking here:

    [LINK]

    If your information on file is not updated within 72 hours, we will temporarily suspend your account.

    Thank you

    Michael Baldger
    Bank Of America® Billing Center

  3. Sean · 1336 days ago

    How do we contact you Graham about secruity issues? I keep getting 10 spam IM's on my AIM telling me i've won a free laptop etc, its getting beyond a joke!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley runs his own award-winning computer security blog, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.